IN THE CLAIMS: 



Please cancel without prejudice claims: 

2 5 through 32, and 
39, 40 and 60; and 

also revise without prejudice claims: 
1/ 2, 3, 6, 9, 
11 through 15, 
18, 19, 21, 23, 24, 
33 through 35, 
37, 38, 41, 42, 45, 46, 
48 through 51, 
54 through 62, and 
65; and 

also add new claims 67 through 78, 
all as indicated below. 

1. (currently amended) Apparatus for deterring failure of a 

computing system; said apparatus comprising: 

a hardware network of components, having substantially no 

software and substantially no firmware except programs held in an 

unalterable read-only memory ; 

terminals of the network for connection to such system; and 
fabrication-preprogrammed hardware circuits of the network . 

for guarding such system from failure. 
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2. (currently amended) The apparatus of claim 1, particularly 
for use with such system that is substantially exclusively made 
up of substantially commercial, off-the-shelf components; and 
wherein: 

at least one of the network terminals is connected to re- 
ceive at least one error signal generated by such system in event 
of incipient failure of such system; [ [and] ] 

at least one of the network terminals is connected to pro- 
vide at least one recovery signal to such system upon receipt of 
the error signal ; and 

the apparatus further comprises means for automatically 
responding to the at least one error signal by generating the at 
least one recovery signal for guarding all of such system against 
failure . 

3. (currently amended) The apparatus of claim 1 [ [2] ] , wherein: 
the network is an infrastructure which is generic in that it 

can accommodate any such system that can issue an error message 
and handle a recovery command 

th e ci r cuits c o m pr ise p o r ti o ns fab r icati o n -p r ep r og ramm e d t o 
e valuat e the at least on e error si g nal t o establish charact er is - 
tics of th e at l e ast o n e re c o very si g nal , 

4. (original) The apparatus of claim 1, further comprising: 
such computing system. 
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5. (original) The apparatus of claim 1, wherein: 

the circuits comprise portions for identifying failure of 
any of the circuits and correcting for the identified failure. 



1 6. (currently amended) The apparatus of claim 1, p a r ticula r ly 

2 f or us e with a c o m p utin g system that has at l e ast o ne s o ftwar e 

3 subsystem f o r c o nfe rr in g resistanc e t o failure o f the system; 

4 and wherein: 

5 the circuits are not capable of running any application pro- 

6 gram 

7 th e c ircuits c o m p ris e substantially no po rti o n that int e r * 

8 f ere s with such f ailu re-re sistanc e s o ftware subsystem . 

1 7. (original) The apparatus of claim 1, particularly for use 

2 with a computing system that is substantially exclusively made of 

3 substantially commercial, off-the-shelf components and that has 

4 at least one hardware subsystem for generating a response of the 

5 system to failure; and wherein: 

s the circuits comprise portions for reacting to said response 

7 of such hardware subsystem. 

1 .8. (original) The apparatus of claim 1, particularly for use 

2 with a computing system that has plural generally parallel 

3 computing channels; and wherein: 

4 the circuits comprise portions for comparing computational 

5 results from such parallel channels. 
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9. (currently amended) The apparatus of claim 8, wherein: 

the parallel channels of such [ [the] ] computing system are 
of diverse design or origin. 



1 10. (original) The apparatus of claim 1, particularly for use 

2 with a computing system that has plural processors; and wherein: 

3 the circuits comprise portions for identifying failure of 

4 any of such processors and correcting for identified failure. 



1 11. (currently amended) The apparatus of claim 1, wherein: 

2 the circuits comprise modules for collecting and responding 

3 [ [t] ] to data received from at least one of the terminals, said 

4 modules comprising: 

s 

6 at least three data-collecting and -responding modules, 

7 and 

8 

9 processing sections for conferring among the modules to 

10 determine whether any of the modules has failed. 
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12. (currently amended) The apparatus of claim 1, particularly 
for use with a computing system that is substantially exclusively 
made of substantially commercial, off-the-shelf components and 
that has at least one subsystem for generating a response of the 
system to failure, and that also has at least one subsystem for 
receiving recovery commands; and wherein: 

the circuits comprise portions for interposing analysis and 
a corrective reaction between the response-generating subsystem 
and the command- receiving subsystem. 

13. (currently amended) Apparatus for deterring failure of an 
entire computing system, wherein the computing system optionally 
includes plural mutually redundant modules; said apparatus 
comprising: 

a network of components having terminals for connection to 
such system, wherein the network is constructed to be initially 
and permanently distinct from such computing system including all 
of such redundant modules if present; and 

circuits of the network for operating programs to guard such 
entire system from failure; 

the circuits comprising portions for identifying failure of 
any of the circuits and correcting for the identified failure. 

14. (currently amended) The apparatus of claim 13, wherein: 
the program- operating portions comprise a section that 

corrects for the identified failure by automatically taking a 
failed circuit out of operation. 
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15. (currently amended) The apparatus of claim 13 [[14]], 
wherein: 

the network is an infrastructure that continuously waits to 
respond to messages from such system 

the progr am * o per atin g por ti o ns c o m p rise a secti o n that sub - 
stitutes and po w er s u p a s p a r e ci r cuit f o r a ci r cuit tak e n o ut o f 
oper ati o n . 



1 16. (original) The apparatus of claim 13, further comprising: 

2 such computing system. 

1 17. (original) The apparatus of claim 13, wherein: 

2 the program- operating portions comprise at least three of 

3 the circuits; and 

4 failure is identified at least in part by majority vote 

5 among the at least three circuits. 

1 18. (currently amended) The apparatus of claim 13, wherein: 

2 said circuits receive from such system error messages warn- 

3 ing of incipient failure, and issue recovery commands to such 

4 system 

5 p articula r ly f o r us e with a c o m p utin g system that has at 

6 l e ast o n e s o ftwar e subsystem f or conferrin g re sistanc e t o failure 

7 o f th e system; — and wh ere in: th e circuits c o m p ris e substantially 

8 n o po rti o n that interf e r e s with such failure - resistance s o ftwar e 

9 subsystem . 
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19. (currently amended) The apparatus of claim 13, particularly 
for use with a computing system that is substantially exclusively 
made of substantially commercial, off-the-shelf components and 
that has at least one hardware subsystem for generating a re- 
sponse of the system to failure; and wherein: 

the circuits comprise portions for reacting to said response 
of such hardware subsystem. 

20. (original) The apparatus of claim 13, particularly for use 
with a computing system that has plural generally parallel com- 
puting channels; and wherein: 

the circuits comprise portions for comparing computational 
results from such parallel channels* 

21. (currently amended) The apparatus of claim 16 [[20]], 
wherein: 

the computing system has [ [the] ] parallel channels that 
the com p utin g system are of diverse design or origin. 

[For the Examiner's convenience: please see new claim 70, 
preferably for insertion here . ] 

22. (original) The apparatus of claim 13, particularly for use 
with a computing system that has plural processors; and wherein: 

the circuits comprise portions for identifying failure of 
any of such processors and correcting for identified failure. 
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1 23. (currently amended) The apparatus of claim 13, wherein: 

2 the network is an infrastructure which is generic in that it 

3 can accommodate any such system that can issue an error message 

4 and handle a recovery command 

s the circuits c o m pr is e m o dul e s f or c o llectin g and r e s po ndin g 

6 to data r e c e iv e d f ro m at l e ast o n e o f the t e rminals, — said m o dules 

7 c o m p risin g : 

8 

9 at least th ree data - collectin g and - r e s p ondin g m o dules, 

10 and 

ii 

12 pr ocessin g secti o ns for c o nf e rrin g am o n g th e m o dules t o 

13 determin e wheth er any o f the m o dules has failed . 

1 24. (currently amended) The apparatus of claim 13, particularly 

2 for use with a computing system that is substantially exclusively 

3 made of substantially commercial, off-the-shelf components and 

4 that has at least one subsystem for generating a response of the 

5 system to failure, and that also has at least one subsystem for 

6 receiving recovery commands; and wherein: 

7 the circuits comprise portions for interposing analysis and 

8 a corrective reaction between such [ [the] ] response-generating 

9 subsystem and such [[the]] command- receiving subsystem. 

25. - 32. (canceled) 
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33. (currently amended) Apparatus for deterring failure of a 
computing system that is substantially exclusively made of sub - 
stantially commercial, off-the-shelf components and that has at 
least one hardware subsystem for generating a n error message ire~ 
s po nse of the system about incipient [[to]] failure; said appara- 
tus comprising : 

a network of components having terminals for connection to 
such system; and 

circuits of the network for operating programs to guard such 
system from failure; 

the circuits comprising portions for reacting to such 
[[said]] error message re s po ns e of such hardware subsystem. 

34. (currently amended) The apparatus of claim 33, wherein: 
the circuits guard the entire such system from failure 
the r eactin g po rtions com p rise sections f or evaluatin g the 

hardwa re - subsystem res po ns e t o e stablish characteristics o f at 
least o n e rec o very si g nal . 

35. (currently amended) The apparatus of claim 33 [[34]], 
wherein : 

the network is generic in that it can accommodate any such 
system that can issue an error message and handle a recovery 
command 

th e r eactin g por ti o ns c o m p ris e secti o ns f o r a pp lyin g the at 
l e ast on e rec o v e ry signal t o such system . 
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36. (original) The apparatus of claim 33, further comprising: 
such computing system, including such hardware subsystem. 

37. (currently amended) The apparatus of claim 3J> [[33]], 
wherein; 

the p a r ticula r ly f o r use with a computing system J thafc has 
plural generally parallel computing channels; and 

the parallel channels of the computing system are of diverse 
design or origin 

wh e rein: the ci r cuits c o m p rise po rti o ns for c o m p a r in g 

c o m p utati o nal re sults f ro m such p a r allel chann e ls . 

38. (currently amended) The apparatus of claim 33, wherein: 
said circuits are not capable of operating any application 

program 

the p arall e l channels o f the c o m p utin g system are o f div e rse 
d e si g n o r or i g in . 



39. and 40. (canceled) 
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41. (currently amended) The apparatus of claim 33, particularly 
for use with a computing system that is substantially exclusively 
made of substantially commercial, off-the-shelf components and 
that has at least one subsystem for generating a response of the 
system to failure, and that also has at least one subsystem for 
receiving recovery commands; and wherein: 

the circuits comprise portions for interposing analysis and 
a corrective reaction between such [ [the] ] response-generating 
subsystem and such [ [the] ] command- receiving subsystem. 

42. (currently amended) Apparatus for deterring failure of an 
entire computing system that is distinct from the apparatus and 
that has plural generally parallel computing channels and has at 
least one application-data input module, and at least one 
processor for running an application program : said apparatus 
comprising: 

a network of components having terminals for connection to 
such system; and 

circuits of the network for operating programs to guard such 
entire system from failure, wherein the such network is con- 
structed to be initially and permanently distinct from such 
computing system including substantially (a) every such applica- 
tion-data input module and (b) every such application-program 
processor, and (c) all of such parallel computing channels; 

the circuits comprising portions for comparing computational 
results from such parallel channels. 
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43. (original) The apparatus of claim 47 [[42]], wherein: 
the parallel channels of the [[such]] computing system are 

of diverse design or origin. 

44. (original) The apparatus of claim 42, wherein: 

the comparing portions comprise at least one section for 
analyzing discrepancies between the results from such parallel 
channels . 

45. (currently amended) The apparatus of claim 44, wherein: 
the circuits are not capable of running any application pro- 
gram 

th e c o m p a r in g por ti o ns fu r the r c o m pr ise at l e ast o ne secti o n 
f o r im po sin g c o r re ctiv e acti o n o n such system in view o f the 
analyz e d discr ep anci e s . 

46. (currently amended) The apparatus of claim 42^ [[45]], 
wherein: 

the network is an infrastructure which is generic in that it 
can accommodate any such system that can issue an error message 
and computational results, and handle a recovery command 

th e at least o n e discre p ancy analyzin g secti o n us e s a ma jo r - 
ity v o tin g crit er i o n f or res o lvin g discr ep ancies . 

47. (original) The apparatus of claim 42, further comprising: 
such computing system. 
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48. (currently amended) The apparatus of claim 42. [[47]], 
wherein : 

the circuits do not and cannot operate any application 
program 

th e p a r allel chann e ls o f the c o m p utin g system are o f diverse 
d e si g n or or i g in . 

49. (currently amended) The apparatus of claim 48, wherein: 
the circuits receive from such computing system error mes- 
sages warning of incipient failure and issue recovery commands to 
such computing system 

th e c o m p a r in g p o r ti o ns c o m p ris e ci r cuit r y fo r p e r forming an 
al go rithm t o validat e a match that is inexact . 
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1 50. (currently amended) [[The a]] Apparatus o f claim 4 9 for 

2 deterring failure of a computing system that is distinct from the 

3 apparatus and that has plural generally parallel computing chan- 

4 nels; said apparatus comprising: 

5 a network of components having terminals for connection to 

6 such system; and 

7 circuits of the network for operating programs to guard such 

8 system from failure , wherein such network is constructed to be 

9 initially and permanently distinct from such computing system in- 

10 eluding all of such parallel computing channels; 

11 the circuits comprising portions for comparing computational 

12 results from such parallel channels; and wherein: 

13 the comparing portions comprise circuitry for performing an 

14 algorithm to validate a match that is inexact; and 

is the algorithm-performing circuitry employs a degree of inex- 

16 actness suited to a type of computation under comparison. 



1 51. (currently amended) The apparatus of claim 50. [[49]], 

2 wherein: 

3 the algorithm-performing circuitry performs an algorithm 

4 that selects a degree of inexactness based on type of computation 

5 under comparison. 



[For the Examiner's convenience: please see new claim 71 through 74, 

preferably for insertion here * ] 
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1 52. (original) The apparatus of claim 42, particularly for use 

2 with a computing system that has plural processors; and wherein: 

3 the circuits comprise portions for identifying failure of 

4 any of such processors and correcting for identified failure. 



1 53. (original) The apparatus of claim 42, wherein: 

2 the circuits comprise modules for collecting and responding 

3 to data received from at least one of the terminals, said modules 

4 comprising : 

5 

6 at least three data- collecting and -responding modules, 

7 and 

8 

9 processing sections for conferring among the modules to 

10 determine whether any of the modules has failed. 



1 54. (currently amended) The apparatus of claim 42, particularly 

2 for use with a computing system that is substantially exclusively 

3 made of substantially commercial, off-the-shelf components and 

4 that has at least one subsystem for generating a response of the 

5 system to failure, and that also has at least one subsystem for 

6 receiving recovery commands; and wherein: 

7 the circuits comprise portions for interposing analysis and 

8 a corrective reaction between such [[the]] response-generating 

9 subsystem and such [[the]] command- receiving subsystem. 
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55. (currently amended) Apparatus for deterring failure of a ny 
computing system that has plural processors and has at least one 
application-data input module, and at least one processor for 
running an application program, and is capable of generating an 
error message warning of incipient failure and capable of re- 
sponding to a recovery command ; said apparatus comprising: 

a network of components having terminals for connection to 
such system, wherein the network is constructed to be initially 
and permanently distinct from such any computing system including 
substantially (a) every such application-data input module and 
(b) every such application-program processor, and (c) all of such 
plural processors; and 

circuits of the network for operating programs to guard any 
such system from failure; 

the circuits comprising portions for identifying failure of 
any of such processors and correcting for identified failure. 



[For the Examiner's convenience: please see new claim 75, 
preferably for insertion here . ] 



56. (currently amended) The apparatus of claim 75 [[55]], 
wherein: 

the identifying portions comprise a section that corrects 
for the identified failure by taking a failed processor out of 
operation. 
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57. (currently amended) The apparatus of claim 75 [[55]]/ 
wherein: 

the circuits cannot and do not run an application program 
th e secti o n c o m pr ises p a r ts f or takin g a pro c e ss or o ut o f 

oper ati o n o nly in cas e o f si g nals indicatin g that the p r o cess or 

has fail e d pe rman e ntly . 

58. (currently amended) The apparatus of claim 7_5 [[55]], 
wherein: 

the circuits protect the entire such computing system 

th e id e ntifyin g por tions c o m p ris e a section that substitutes 

and po w er s u p a s p ar e circuit f or a p r o c e ss o r tak e n o ut o f 

oper ati o n . 

59. (currently amended) The apparatus of claim 75 [[55]], 
further comprising: 

such computing system. 

60. (canceled) 
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61. (currently amended) The apparatus of claim 75. [[55]], par- 
ticularly for use with a computing system that is substantially 
exclusively made of substantially commercial, off-the-shelf 
components and that has at least one subsystem for generating a 
response of the system to failure, and that also has at least one 
subsystem for receiving recovery commands; and wherein: 

the circuits comprise portions for interposing analysis and 
a corrective reaction between such [[the]] response-generating 
subsystem and such [ [the] ] command- receiving subsystem. 
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1 62 . (currently amended) Apparatus for deterring failure of an 

2 entire computing system that is distinct from the apparatus and 

3 has at least one application-data input module, and at least one 

4 processor for running an application program ; said apparatus 

5 comprising: 

6 a network of components having terminals for connection to 

7 such system; and 

8 circuits of the network for operating programs to guard such 

9 entire system from failure; 

10 the circuits comprising modules for collecting and respond- 

11 ing to data received from at least one of the terminals, said 

12 modules comprising: 

13 

14 at least three data- collecting and -responding modules, 

is and 

16 

17 processing sections for conferring among the modules to 

is determine whether any of the modules has failed; 

19 

20 wherein the network, including all of the modules and sub- 

21 stantiallv (a) every such application-data input module and (b) 

22 every such application-program processor, and (c) all of the 

23 processing sections, is constructed to be initially and perma- 

24 nently distinct from such computing system. 



1 63. (original) The apparatus of claim 62, further comprising: 

2 such computing system. 
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1 64. (original) The apparatus of claim 62, particularly for use 

2 with a computing system that is substantially exclusively made of 

3 substantially commercial, off-the-shelf components and that has 

4 at least one subsystem for generating a response of the system to 

5 failure, and that also has at least one subsystem for receiving 

6 recovery commands; and wherein: 

7 the circuits comprise portions for interposing analysis and 

8 a corrective reaction between such [[the]] response -generating 

9 subsystem and such [[the]] command- receiving subsystem. 

[For the Examiner's convenience: please see new claims 7 6 through 78, 

preferably for insertion here . ] 

1 65. (currently amended) Apparatus for deterring failure of a 

2 computing system that is substantially exclusively made of sub - 

3 stantially commercial, off-the-shelf components and that has at 

4 least one subsystem for generating a response of the system to 

5 failure, and that also has at least one subsystem for receiving 
€ recovery commands; said apparatus comprising: 

7 a network of components having terminals for connection to 

8 such system between the response -generating subsystem and the 

9 recovery- command- receiving subsystem; and 

10 circuits of the network for operating programs to guard such 

11 system from failure; 

12 the circuits comprising portions for interposing analysis 

13 and a corrective reaction between the response-generating sub- 

14 system and the command- receiving subsystem. 
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1 66. (previously presented) The apparatus of claim 65, further 

2 comprising: 

3 such computing system, 

1 67. (new) The apparatus of claim 65, wherein: 

2 the circuits cannot and do not run any application program. 

1 68. (new) The apparatus of claim 65, wherein: 

2 the circuits protect the entire such system. 

1 69. (new) The apparatus of claim 65, wherein: 

2 the network is an infrastructure which is generic in that it 

3 can accommodate any such system that can issue an error message 

4 and handle a recovery command. 

1 70. (new) The apparatus of claim 13, wherein: 

2 the circuits do not and cannot operate any application pro- 

3 gram. 

1 71. (new) The apparatus of claim 50, wherein: 

2 the circuits cannot and do not run any application program. 

1 72. (new) The apparatus of claim 50, wherein: 

2 the circuits protect the entire such system. 
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1 73. (new) The apparatus of claim 50, wherein: 

2 the circuits receive from such computing system error messa- 

3 ges warning of incipient failure and issue recovery commands to 

4 such computing system. 

1 74. (new) The apparatus of claim 50, wherein: 

2 the network is an infrastructure which is generic in that it 

3 can accommodate any such system that can issue an error message 

4 and computational results, and can handle a recovery command. 

1 75. (new) The apparatus of claim 55, wherein: 

2 the program-operating circuits guard any such system from 

3 failure by issuing a recovery command; and 

4 the failure- identifying and correcting portions provide the 

5 recovery command. 

1 76. (new) The apparatus of claim 62, wherein: 

2 the circuits cannot and do not run any application program. 

1 77. (new) The apparatus of claim 62, wherein: 

2 the circuits protect the entire such system. 
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